Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: +ZC8qbOjt/dInLyrbtvv9kNo6zmh61M8Cs+rzasc+qo=
Subject key identifier: 9C:D7:55:1B:09:37:EB:71:BF:47:8B:BA:51:63:E1:B6:3E:19:EB:68
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 019674FA40B1A4F52B47540AD86B333FE55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 0F6A
Signing time: Sun 27 Apr 2025 02:01:19 +0000
Manifest this update: Sun 27 Apr 2025 02:01:19 +0000
Manifest next update: Mon 28 Apr 2025 02:01:19 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: T9WLNcs/HGMaSjUfSY8CQXYEIvLi3MCLalJ0uS2E5c4=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:40:b1:a4:f5:2b:47:54:0a:d8:6b:33:3f:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Apr 27 02:01:19 2025 GMT
Not After : Apr 28 02:01:19 2025 GMT
Subject: CN=9cd7551b0937eb71bf478bba5163e1b63e19eb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:c1:61:bc:7a:2c:ac:94:61:0e:55:91:c6:
ab:70:22:e2:a0:c9:6a:25:59:ae:22:fe:db:26:3a:
c8:75:94:32:6a:7b:36:09:87:21:8b:06:38:ff:1d:
e0:e6:20:d3:c3:3f:a1:0a:a1:e4:8e:d8:b4:ef:a7:
34:c4:cb:54:2f:5a:c1:d9:0a:86:cc:3d:8d:c9:24:
64:ef:bb:72:11:1f:3a:4b:56:92:86:02:98:cb:83:
ad:b1:ac:ca:a7:75:45:58:e0:ef:8c:a4:cf:3b:e0:
86:39:2f:bb:82:98:f3:cc:2e:26:d9:b5:42:84:01:
5e:5e:cf:fd:28:de:61:f3:13:fb:9b:80:b9:f5:d7:
4d:b6:06:39:20:9c:cc:25:d7:fc:a1:6b:ba:80:31:
6c:da:c0:a0:7b:44:f7:7d:5b:88:6f:86:07:3b:b0:
5b:67:54:df:23:f9:67:49:41:14:8d:9c:e0:5d:26:
a3:ae:54:79:7b:cd:2e:1c:15:83:f6:7f:b9:f4:b7:
56:d1:aa:92:07:c8:93:92:ab:2d:ce:83:44:b6:d0:
2d:14:15:c7:29:e5:79:c6:f4:c6:f9:19:ac:6b:f5:
e9:da:08:21:17:14:f5:50:44:db:04:40:72:27:ce:
d8:b0:2b:7f:90:ef:5e:df:37:bd:c8:6c:b4:5b:2e:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:55:1B:09:37:EB:71:BF:47:8B:BA:51:63:E1:B6:3E:19:EB:68
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:ca:d6:ad:28:85:4e:18:be:1a:de:f4:e6:06:ff:f6:bd:
ab:fa:04:4e:78:ee:d8:b1:ee:0c:12:0c:28:01:04:6b:29:9b:
e1:a4:32:b4:69:6c:39:34:c9:2f:d9:d5:8d:93:de:8d:07:2e:
80:4b:65:ac:4b:21:2e:7f:4e:de:1c:53:9c:6a:76:9e:1f:6a:
cb:c1:95:d0:fd:33:13:8e:e7:59:b6:2b:44:71:88:4b:ad:7a:
1e:66:3e:2f:65:a6:83:ef:24:c7:f9:2a:ba:7d:9b:77:5a:a8:
ab:88:fb:78:ce:00:9c:4c:85:d2:74:5b:8b:18:c4:be:7b:7c:
02:1e:e0:48:a5:49:1c:55:de:a0:cf:09:27:85:24:0a:6e:2f:
a8:b2:56:e7:8a:24:14:3a:df:55:a5:7c:b5:24:c1:c3:db:a3:
34:7e:b8:2a:b0:ab:cf:ff:d8:40:52:0e:a2:62:01:31:a6:4d:
83:9d:b2:b7:a9:f2:a7:ff:43:87:da:f1:ef:68:1b:1c:ca:ec:
36:4f:e8:07:f9:ab:d0:ea:5d:7f:5a:0b:d7:c9:d0:bc:f1:f1:
e3:00:f9:1e:61:44:e6:71:f4:57:f3:af:e2:36:12:37:14:04:
e7:21:ef:14:d1:4d:6f:93:29:d3:93:8c:cb:89:7d:c7:0a:98:
cc:8d:d7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+kCxpPUrR1QK2GszP+VaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0
N2I1ZmYwHhcNMjUwNDI3MDIwMTE5WhcNMjUwNDI4MDIwMTE5WjAzMTEwLwYDVQQD
Eyg5Y2Q3NTUxYjA5MzdlYjcxYmY0NzhiYmE1MTYzZTFiNjNlMTllYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6jBYbx6LKyUYQ5VkcarcCLioMlq
JVmuIv7bJjrIdZQyans2CYchiwY4/x3g5iDTwz+hCqHkjti076c0xMtUL1rB2QqG
zD2NySRk77tyER86S1aShgKYy4OtsazKp3VFWODvjKTPO+CGOS+7gpjzzC4m2bVC
hAFeXs/9KN5h8xP7m4C59ddNtgY5IJzMJdf8oWu6gDFs2sCge0T3fVuIb4YHO7Bb
Z1TfI/lnSUEUjZzgXSajrlR5e80uHBWD9n+59LdW0aqSB8iTkqstzoNEttAtFBXH
KeV5xvTG+Rmsa/Xp2gghFxT1UETbBEByJ87YsCt/kO9e3ze9yGy0Wy7YPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzXVRsJN+txv0eLulFj4bY+GetoMB8GA1UdIwQY
MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt
NGE0ZTBmNDI0ZjE3LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3
LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3HK1q0o
hU4Yvhre9OYG//a9q/oETnju2LHuDBIMKAEEaymb4aQytGlsOTTJL9nVjZPejQcu
gEtlrEshLn9O3hxTnGp2nh9qy8GV0P0zE47nWbYrRHGIS616HmY+L2Wmg+8kx/kq
un2bd1qoq4j7eM4AnEyF0nRbixjEvnt8Ah7gSKVJHFXeoM8JJ4UkCm4vqLJW54ok
FDrfVaV8tSTBw9ujNH64KrCrz//YQFIOomIBMaZNg52yt6nyp/9Dh9rx72gbHMrs
Nk/oB/mr0Opdf1oL18nQvPHx4wD5HmFE5nH0V/Ov4jYSNxQE5yHvFNFNb5Mp05OM
y4l9xwqYzI3Xwg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:02:30 2025 by rpki-client